DNB - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application DNB published at the 'play' market has multiple vulnerabilities...

Halifax Mobile Banking app - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Halifax Mobile Banking app published at the 'play' market has multiple vulnerabilities...

Video Surveillance Spy Camera - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Video Surveillance Spy Camera published at the 'play' market has multiple vulnerabilities...

Tyumen.Transport - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tyumen.Transport published at the 'play' market has multiple vulnerabilities...

ExpressionEngine: Arbitrary SQL query execution and reflected XSS in the "SQL Query Form"

Hello, The mentioned module is vulnerable to SQL injection due to the fact that a query can be done in a GET request, with the query is Base64 encoded and supplied as the value of the parameter "thequery". This allows an attacker to perform arbitrary SQL queries if they trick an authenticated adm...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to the incorrect processing of string data consisting solely of spaces in the base64DecodeInternal function in wtf/text/Base64.cpp in Blink. Exploiting this vulnerability allows malicious actors to trigger a denial-of-service attack by...

ING DIRECT España. Banca Móvil - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application ING DIRECT España. Banca Móvil published at the 'play' market has multiple vulnerabilities...

Phoenix Exploit Kit Remote Code Execution

This module exploits a Remote Code Execution in the web panel of Phoenix Exploit Kit via geoip.php. The Phoenix Exploit Kit is a popular commercial crimeware tool that probes the browser of the visitor for the presence of outdated and insecure versions of browser plugins like Java and Adobe Flash...

Armored Aces - 3D Tanks Online - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Armored Aces - 3D Tanks Online published at the 'play' market has multiple vulnerabilities...

MobilKincstár - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application MobilKincstár published at the 'play' market has multiple vulnerabilities...

百度手机输入法 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application 百度手机输入法 published at the 'play' market has multiple vulnerabilities...

My Cafe: Recipes & Stories - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application My Cafe: Recipes & Stories published at the 'play' market has multiple vulnerabilities...

Andujar Guia Turistica - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Andujar Guia Turistica published at the 'play' market has multiple vulnerabilities...

Skype For Business 2013 User Enumeration

Exploit Title: Skype for Business 2013 user enumeration timing attack Date: 2016-06-08 Exploit Author: nyxgeek Vendor Homepage: https://www.microsoft.com Version: Skype for Business 2013 Skype for Business 2013 is vulnerable to a timing attack that allows for username enumeration When Skype/Lync ...

CVE-2016-3687

Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on SSO, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the...

Open redirect

Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on SSO, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the...

Caref - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Caref published at the 'play' market has multiple vulnerabilities...

Apache Shiro v1.2.4 Cookie RememberME Deserial RCE

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apache Shiro v1.2.4. Note that other versions of Apache Shiro may also be exploitable if the encryption key used by Shiro to encrypt rememberMe cookies is known. The gadget chain used for Java...

Sky Plus Estonia - AWS Credentials, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Sky Plus Estonia published at the 'play' market has multiple vulnerabilities...

Cameras Estonia - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Cameras Estonia published at the 'play' market has multiple vulnerabilities...